All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 29,769
- 1,241
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 10,633–10,656 of 29,769 skills
- Avg PrivacyHelpt bij het bouwen van privacy-conforme systemen volgens de AVG (Algemene Verordening Gegevensbescherming / GDPR), Privacy by Design, Privacy by Default en DPIA-vereisten voor Nederlandse overheidsorganisaties. Biedt richtlijnen voor gegevensverwerking, rechten van betrokkenen, bewaartermijnen en technische privacy-maatregelen. Gebruik deze skill wanneer de gebruiker vraagt over 'AVG', 'GDPR', 'privacy', 'persoonsgegevens', 'personal data', 'gegevensbescherming', 'data protection', 'Privacy...Votes: 0GitHub stars: 4
- Authz ReviewUse when reviewing authorization end-to-end — route → gate → policy → query scope → response filter — before changes to permissions, tenants, ownership, or admin flows.Votes: 0GitHub stars: 4
- Auth SecurityOAuth 2.1 + JWT authentication security best practices. Use when implementing auth, API authorization, token management. Follows RFC 9700 (2025).Votes: 0GitHub stars: 4
- Auth ImplementNode.js Express 백엔드의 JWT 인증 시스템을 구현하는 스킬. 'auth 구현', '로그인 만들어줘', '회원가입 API', 'JWT 미들웨어', '인증 시스템 구현'처럼 인증/계정 관련 구현을 요청하면 이 스킬을 사용할 것. auth-builder 에이전트가 사용한다.Votes: 0GitHub stars: 4
- Auth Factor DesignDecision-aid skill for authentication factor architecture. Forces explicit have/know/are mapping, coercion-resistance analysis, FIDO2 PIN/UV policy, and identifies anti-patterns like Python deps in PRF hot pathsVotes: 0GitHub stars: 4
- Auth ArchitectureLiteLLM-RS Authentication Architecture. Covers JWT + API Key + RBAC multi-method auth, rate limiting with DashMap, middleware pipeline, and secure credential management.Votes: 0GitHub stars: 4
- AuditorUse when: auditing a website URL or codebase, checking site health score, SEO audit, performance audit, security scan, accessibility audit, mobile audit, broken links, meta tags, structured data. Triggers: 'audit my website', 'check https://...', 'what's wrong with my site', 'site health', 'audit this URL', 'find issues on my site', 'check for SEO problems', 'run a full audit'.Votes: 0GitHub stars: 4
- Auditing Access ControlAudit access control implementations for security vulnerabilities and misconfigurations. Use when reviewing authentication and authorization. Trigger with 'audit access control', 'check permissions', or 'validate authorization'.Votes: 0GitHub stars: 4
- Audit Python Environments And Requirements Files For Known VulneCheck Python environments and requirements files for published vulnerabilities before shipping, upgrading, or approving dependency changes.Votes: 0GitHub stars: 4
- Audit Python Dependency Sets For Known Vulnerabilities Before ReScan Python requirements and environments for known vulnerable or malicious packages before they move further through delivery or promotion workflows.Votes: 0GitHub stars: 4
- Audit OrchestratorRun comprehensive parallel audit — dispatches specialized agents by scope (frontend, backend, infra, security)Votes: 0GitHub stars: 4
- Audit Network SecuritySecurity audit of a UniFi home or small-office network using the unifi-mcp tools. Use this skill when asked to audit, review, check, or assess the security posture of a UniFi network — including device inventory, firmware currency, WiFi configuration, firewall rules, network segmentation, DNS anomalies, VPN configuration, and device health. Produces a prioritised findings report.Votes: 0GitHub stars: 4
- Audit Linux Host Hardening Drift Before Exposing Ssh Or RollingUses Lynis to run an on-host security audit and turn the findings into a prioritized hardening checklist for an agent or operator. Invoke it when a machine is about to become internet-facing, after base image changes, or whenever you need a quick read on hardening drift instead of a generic vulnerability scan.Votes: 0GitHub stars: 4
- Audit FullSingle-pass codebase analysis leveraging Opus 4.6 1M context for comprehensive security scanning, architecture review, and dependency auditing. Loads entire codebases for cross-file pattern detection and generates structured audit reports with severity-ranked findings. Use when you need whole-project analysis before releases or security reviews.Votes: 0GitHub stars: 4
- Audit FlushInspect and flush staged audit-trail entries to the remote trail repository. Use when the user asks to "flush audit trail", "show what's pending in audit trail", "dry-run audit flush", "retry audit pending", or when diagnosing why a previous auto-flush was skipped (secret hit, push failure, manual mode).Votes: 0GitHub stars: 4
- Audit Cloud Accounts For Security Misconfigurations With ProwlerRun targeted AWS, Azure, or GCP security and compliance audits when an agent needs actionable cloud findings instead of a generic cloud-security platform overview.Votes: 0GitHub stars: 4
- Attio Security BasicsSecure Attio API integrations -- token scoping, secret management, scope auditing, webhook signature verification, and rotation procedures. Trigger: "attio security", "attio secrets", "secure attio", "attio API key security", "attio scopes", "attio token rotation".Votes: 0GitHub stars: 4
- Attack Path ArchitectGenerates strategic attack trees and kill chains from reconnaissance data or domain input. Maps MITRE ATT&CK TTPs, identifies chaining opportunities, trust relationships, and prioritizes attack paths by feasibility and impact. Use when user asks for "attack path", "kill chain", "attack tree", "threat modeling from recon", "attack surface analysis", or "prioritize targets". Requires prior recon data or a domain to analyze. For authorized pentesting and red team engagements only.Votes: 0GitHub stars: 4
- Attack MappingMITRE ATT&CK technique mapping for a CVE or every entry in `.vulnetix/memory.yaml`. Use when planning detection coverage gaps, mapping a CVE to defender controls, building an executive heatmap of repo risk by tactic, or correlating with internal D3FEND counter-techniques.Votes: 0GitHub stars: 4
- AtlassianManage Jira issues and Confluence wiki pages in Atlassian Cloud. Use when: (1) searching/creating/updating Jira issues with JQL, (2) searching/reading/creating Confluence pages with CQL, (3) managing Jira workflows, transitions, and comments, (4) browsing Confluence spaces and page hierarchies. Supports OAuth 2.1 via MCP server (recommended) or API token authentication (fallback).Votes: 0GitHub stars: 4
- Atlassian McpIntegrates with Atlassian products to manage project tracking and documentation via MCP protocol. Use when querying Jira issues with JQL filters, creating and updating tickets with custom fields, searching or editing Confluence pages with CQL, managing sprints and backlogs, setting up MCP server authentication, syncing documentation, or debugging Atlassian API integrations.Votes: 0GitHub stars: 4
- Assemblyai Security BasicsApply AssemblyAI security best practices for API keys, PII, and access control. Use when securing API keys, implementing PII redaction, or configuring temporary tokens for browser-side streaming. Trigger with phrases like "assemblyai security", "assemblyai secrets", "secure assemblyai", "assemblyai API key security", "assemblyai PII".Votes: 0GitHub stars: 4
- Arch Check Quyenvjp Pmtl VnReview code or a module implementation against PMTL_VN architecture contracts. Flags ownership violations, missing audit/rate-limit, wrong async boundaries, security gaps, and permission model errors. Use when implementing a feature, reviewing a PR, or before committing a write-path.Votes: 0GitHub stars: 4
- AprenderAuto-extração de padrões de domínio regulado. Quando o dev resolve um problema complexo de compliance, extrai como padrão reutilizável que é auto-injetado em situações similares. Use quando o usuário disser "kairos aprender", "extrair padrão", "registrar padrão", "salvar como padrão".Votes: 0GitHub stars: 4